medium6.1
CVE-2018-19391
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?p…
Impact
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cobham | Satcom Sailor 250 Firmware | before 1.25 |
| Cobham | Satcom Sailor 500 Firmware | before 1.25 |